WellinTech KingView KingMess log file log message buffer overflow

Strike ID:
E12-6mv01
CVSS:
10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2012

Description

This strike exploits a buffer overflow vulnerability in WellinTech KingView KingMess. A specially crafted KVL file will cause a stack buffer overflow. Successful exploitation may result in execution of arbitrary code with user privileges or abnormal termination of the KingMess program.

CVE

Bid